Privacy Policy

Last updated: 12 August 2026

This Privacy Policy explains what personal information Limen AI Lab (“Limen”, “we”, “us”) collects when you interact with china-ai-tour.com (the “Site”) and the China AI Tour private executive programmes (the “Programme”), how we use it, who we share it with, and the choices you have. We follow the principles of the PRC Personal Information Protection Law (“PIPL”) and align with major international privacy frameworks (EU GDPR, UK GDPR, POPIA) where they apply to our users.

1. Who is the data controller?

Limen AI Lab is the controller of the personal data collected through this Site and Programme. You can reach us at yubin.yang@limenlab.ai.

2. What we collect

We only collect what we need to operate the Programme and respond to your enquiries.

• Contact form submissions: name, email, phone (optional), company, job title, country, organisation size, programme and sector interests, message, source and preferred contact channel.
• Request and attribution metadata: IP address, user-agent, referring and landing pages, UTM parameters and advertising click identifiers. These support spam prevention, response handling and consented campaign measurement.
• Email engagement (via Resend): delivery, open, and click events on the brochure emails we send you. Used to confirm your brochure arrived and to follow up appropriately.
• Registration & programme data (if you register): billing details, passport information if required by a host, dietary and accessibility requirements, and flight details for ground logistics. We only request passport data when a host explicitly requires it.

With your optional consent, we use Google Analytics and the LinkedIn Insight Tag to measure site and campaign performance. These tools are not loaded when you choose “Essential only”. We do not sell personal data.

3. Cookies and local storage

The Site uses essential storage for administration and your privacy preference. With consent, analytics and advertising providers may set cookies or similar identifiers. We also store a first-touch attribution record locally after consent so an enquiry can be connected to the campaign that generated it. You can clear these choices through your browser storage controls.

4. Why we use your information (purposes and legal bases)

• Respond to enquiries and send the brochure you requested — legal basis: performance of pre-contractual steps at your request, and our legitimate interest in replying.
• Follow up personally and nurture the relationship — legal basis: legitimate interest (you can opt out of follow-ups at any time).
• Operate the Programme, including booking logistics with hosts and service providers — legal basis: performance of our contract with you.
• Comply with legal, tax, and accounting obligations — legal basis: legal obligation.
• Detect and prevent spam or abuse of the contact form — legal basis: legitimate interest.

5. Who we share it with (our processors)

We share personal data only with service providers that process it on our behalf under written agreements, and only to the extent necessary for the services below:

• Supabase — hosted Postgres database (leads table), ap-southeast-1 (Singapore). Provider: Supabase, Inc. (USA).
• Resend — transactional email delivery (US region). Provider: Resend, Inc. (USA).
• Vercel — Site hosting and serverless functions. Provider: Vercel, Inc. (USA).
• Programme hosts, hotels, and ground operators — only the minimum necessary details (for example, name and passport info where a host requires it for on-site access).

Some of these providers are based outside mainland China (Supabase, Resend, and Vercel process data in Singapore and the United States). By submitting the contact form or registering for the Programme you are informed of, and consent to, the cross-border transfer of your personal information to these providers as required under Article 39 of the PIPL. Equivalent safeguards — including standard contractual clauses, encryption in transit and at rest, and contractually restricted processing purposes — are in place.

6. How long we keep it

• Contact-form leads that do not convert: up to 24 months from the last interaction, then deleted or anonymised.
• Registered participant records: retained for the duration of the Programme plus 7 years, to meet accounting and tax record-keeping obligations, then deleted.
• Email delivery logs: retained by Resend in accordance with its standard retention windows (typically up to 90 days for full content, longer for aggregated metadata).

7. Your rights

Depending on your jurisdiction, you have some or all of the following rights:

• access a copy of the personal data we hold about you;
• correct inaccurate or incomplete information;
• request deletion of your data (“right to be forgotten”);
• restrict or object to certain processing, including direct marketing;
• port your data to another controller in a common format;
• withdraw consent, where consent is the legal basis.

To exercise any of these rights, email yubin.yang@limenlab.ai. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

8. Security

We apply reasonable technical and organisational measures appropriate to the sensitivity of the data: HTTPS in transit, encryption at rest on Supabase and Vercel, narrow access controls, and server-only API keys for sensitive operations. No system is perfectly secure; we will notify affected users and regulators where required by law if a reportable incident occurs.

9. Children

The Site and Programme are intended for adult professionals. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. The “Last updated” date at the top shows when it was last revised. Material changes will be flagged on the Site or emailed to active registrants before they take effect.

11. Contact and complaints

Questions or complaints about how we handle your data? Email yubin.yang@limenlab.ai. Under the PIPL you also have the right to lodge a complaint with the Cyberspace Administration of China or another competent PRC authority. If you are based in the EU/UK or a POPIA jurisdiction, you may additionally lodge a complaint with your local data protection authority.